Information Commissioner’s Office 


Consultation: Age appropriate design code 


Introduction 


The Information Commissioner is seeking feedback on her draft code of practice Age appropriate 
design: a code of practice for online services likely to be accessed by children (the code). 


The code will provide guidance on the design standards that the Commissioner will expect 
providers of online ‘Information Society Services’ (ISS), which process personal data and are 
likely to be accessed by children, to meet. 


The code is now out for public consultation and will remain open until 31 May 2019. The 
Information Commissioner welcomes feedback on the specific questions set out below. 


For this consultation, we will publish all responses except for those where the respondent 
indicates that they are an individual acting in a private capacity (e.g. a member of the public or a 
parent). All responses from organisations and individuals responding in a professional capacity 
(e.g. academics, child development experts, sole traders, child minders, education professionals) 
will be published. We will remove email addresses and telephone numbers from these responses 
but apart from this, we will publish them in full. 


For more information about what we do with personal data please see our privacy notice. 
Please note, we are using the platform Snap Surveys to gather this information. Any data 


collected by Snap Surveys for ICO is stored on UK servers. You can read their Privacy Policy 
here. 


Section 1: Your views on the code 


Is the ‘About this code' section clearly communicated? 
Ql Q Yes 
O No 


If no, then please provide your reasons for this view. 
Qla 


Is the 'Services covered by this code' section clearly communicated? 


Q2 BD Yes 
O No 


If no, then please provide your reasons for this view. 
Q2a 


Section 2: Your views on the draft standards 


There are 16 draft standards in the code. You can comment on all the drafts 
standards, or focus on a single standard. If you do not want to answer questions on 
a standard please press skip. 


The standards are: 


1) Best interests of the child 

2) Age Appropriate Application 

3) Transparency 

4) Detrimental use of data 

5) Policies and community standards 
6) Default settings 

7) Data minimisation 

8) Data sharing 

9) Geolocation 

10) Parental Controls 

11) Profiling 

12) Nudge techniques 

13) Connected toys and devices 

14) Online tools 

15) Data protection impact assessments 
16) Governance and accountability 


Best interests of the child: The best interests of the child should be a 
primary consideration when you design and develop online services likely to be 
accessed by a child. 


Q3 = ©) I would like to comment on this standard 


© skip 


Q4 


Q4a 


Q5 


Q5a 


Have we communicated our expectations for this standard clearly? 
O Yes 
O No 


If no, then please give reasons for your answer. 


Do you have any examples that you think could be used to illustrate the 
approach we are advocating to this standard? 


O Yes 
O No 


If yes, then please give reasons for your answer. 


Q6 


Q6a 


Q7 


Q7a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


O Yes 
O No 


If yes, then please give reasons for your answer. 


Do you envisage any feasibility challenges to online services delivering this 
standard? 


O Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


Q8 ©) Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Q8a 
Do you know of any online resources that you think could be usefully linked to 
from this section of the code? 

Q9 Q Yes 
O No 
If yes, then please provide details (including links). 

Q9a 
Age-appropriate application: Consider the age range of your audience and 
the needs of children of different ages. Apply the standards in this code to all 
users, unless you have robust age-verification mechanisms to distinguish 
adults from children. 

Q10 


© I would like to comment on this standard 


O Skip 


Have we communicated our expectations for this standard clearly? 
Q11 OM Yes 

O No 

If no, then please give reasons for your answer. 
Qila 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q12 © Yes 
© No 


If yes, then please give reasons for your answer. 
Qi2a 


Q13 


Qi3a 


Q14 


Q14a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


© Yes 
O No 


If yes, then please give reasons for your answer. 


The standard might identify more explicitly sites/apps where young children are, to 
predators; age-verification may also be needed to keep adults out. Children often 
want to access something that they are deemed too young for. Anxieties about 
getting the age-appropriateness of an ISS correct, may lead the ISS to rate it for 


older young people than is necessary, and deprive younger people from gaining 
access. 


Do you envisage any feasibility challenges to online services delivering this 
standard? 


© Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Guidelines on age-appropriateness of content are rooted in historical, and often 
moral debates. There is no clear guidance based on evidence, and it would be 
ethically questionable to even try. So this is a big ask for the ISS. Would it be helpful 
to have more of a steer from media providers, such as the BBC, or the BBFC as to 
the type of content/ISS that might be suitable for each age range. They presumably 
have sufficient knowledge to ascertain what is acceptable and what is not. On trying 
to evaluate well-being apps for young people, via the App Stores, suggested that no- 


one has this clearly mapped, and the recommendations regarding age for use are 
almost random. 


Q15 


Q15a 


Q16 


Q16a 


Q17 


Do you think this standard requires a transition period of any longer than 3 
months after the code comes into force? 


© Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
© No 


If yes, then please provide details (including links). 


Transparency: The privacy information you provide to users, and other 
published terms, policies and community standards, must be concise, 
prominent and in clear language suited to the age of the child. Provide 
additional specific ‘bite-sized’ explanations about how you use personal data at 
the point that use is activated. 


© I would like to respond to this standard 


O Skip 


Have we communicated our expectations for this standard clearly? 
Q18 © Yes 

O No 

If no, then please give reasons for your answer. 
Q18a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q19 © Yes 
© No 


If yes, then please give reasons for your answer. 
Q19a 


Q20 


Q20a 


Q21 


Q21a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


© Yes 
O No 


If yes, then please give reasons for your answer. 


It is immensely challenging to consider how many very young children could grasp 
the concept of disembodied data, let alone the consequences of what might happen 
to it. It seems to me the safeguards of data minimisation and processing are best 
placed to safeguard the very young, rather than expect them to become skilled in 
information governance. The situation is very different for older children and 
adolescents, and perhaps it is there the focus should be. 


Do you envisage any feasibility challenges to online services delivering this standard? 


© Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Being able to design and create content that is accessible to very young children, 
about complex concepts that even adults may struggle with may lead to legally 
compliant but ineffectively worded solutions. 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


Q22 © Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Q22a Is there a need to explore further how much young children will be burdened by 
concerns that are best left to adults and parents. The key area to investigate is when 
they want to start to manage this themselves; perhaps 8 years and upwards? 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


Q23 ©) Yes 
© No 


If yes, then please provide details (including links). 


Q23a 
Detrimental use of data: Do not use children’s personal data in ways that 
have been shown to be detrimental to their wellbeing, or that go against 
industry codes of practice, other regulatory provisions or Government advice. 
Q24 


© I would like to respond to this standard 


O Skip 


Q25 


Q25a 


Q26 


Q26a 


Have we communicated our expectations for this standard clearly? 


© Yes 
O No 


If no, then please give reasons for your answer. 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


© Yes 
© No 


If yes, then please give reasons for your answer. 


I think the legal concept of Significant Harm in the Children Act may help define 
further what is detrimental: Significant harm Significant harm is one of the limbs to 
proving that the threshold criteria under section 31(2) of the Children Act 1989 are 
met, before a court can consider whether to make a care order or supervision order. 
There is no statutory definition of significant harm. "Harm" is defined as: Ill 
treatment. The impairment of physical or mental health (including that suffered from 
seeing or hearing another person suffer ill treatment). The impairment of physical 
intellectual, emotional, social or behavioural development (including that suffered 
from seeing or hearing another person suffer ill treatment). "III treatment" includes 
sexual abuse, neglect, emotional abuse and psychological abuse. In considering 
whether harm is significant to a child's health or development, the child's health and 
development must be compared with that which could reasonably be expected of a 
similar child. This includes impairment suffered from seeing or hearing the ill 
treatment of another person. (Section 31(9), Children Act 1989.) The meaning of 
"significant" in case law has developed to mean enough to justify state intervention. 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q27 BP Yes 
O No 
If yes, then please give reasons for your answer. 


Q27a Again, itis a complex ask of the ISS to ascertain the impact on health and 
development. It would require almost a further impact assessment. Perhaps a clear 
list of what are deemed the most immediate harms may be a good starting point. 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q28 © Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q28a Very complex consideration, especially when certain public health concerns e.g. 
childhood obesity are undoubtedly a risk for many an ISS. 


Q29 


Q29a 


Q30 


Q30a 


Q31 


Do you think this standard requires a transition period of any longer than 3 
months after the code comes into force? 


© Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
© No 


If yes, then please provide details (including links). 


Policies and community standards: Uphold your own published terms, 
policies and community standards (including but not limited to privacy policies, 
age restriction, behaviour rules and content policies). 


O I would like to respond to this standard 


© skip 


Have we communicated our expectations for this standard clearly? 


Q32 ©) Yes 
O No 


If no, then please give reasons for your answer. 
Q32a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q33 © Yes 
© No 


If yes, then please give reasons for your answer. 
Q33a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q34 ©) Yes 
O No 


If yes, then please give reasons for your answer. 


Q34a 
Do you envisage any feasibility challenges to online services delivering this 
standard? 

Q35 ©) Yes 


O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q35a 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


Q36 ©) Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Q36a 


Do you know of any online resources that you think could be usefully linked to 
from this section of the code? 


Q37 © Yes 

O No 

If yes, then please provide details (including links). 
Q37a 


Default settings: Settings must be ‘high privacy’ by default (unless you can 
demonstrate a compelling reason for a different default setting, taking account 
of the best interests of the child). 


Q38 ©) I would like to respond to this standard 


© skip 


Have we communicated our expectations for this standard clearly? 
Q39 © Yes 
O No 


If no, then please give reasons for your answer. 
Q39a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q40 ©) Yes 
© No 


If yes, then please give reasons for your answer. 
Q40a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q41 ©) Yes 

O No 

If yes, then please give reasons for your answer. 
Q41a 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q42 ©) Yes 
© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q42a 


Q43 


Q43a 


Q44 


Q44a 


Q45 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
O No 


If yes, then please provide details (including links). 


Data minimisation: Collect and retain only the minimum amount of personal 
data you need to provide the elements of your service in which a child is 
actively and knowingly engaged. Give children separate choices over which 
elements they wish to activate. 


© I would like to respond to this standard 


O Skip 


Have we communicated our expectations for this standard clearly? 


Q46 © Yes 
O No 


If no, then please give reasons for your answer. 
Q46a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q47 OB Yes 
© No 


If yes, then please give reasons for your answer. 


Q47a The Caldicott Principles in health are a good example, and I think appreciated by 


most of us, of how some data should not be shared or collected widely or without 


explicit consent. The aspiration is to achieve that same attitude towards children and 
young people. 


Q48 


Q48a 


Q49 


Q49a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


© Yes 
O No 


If yes, then please give reasons for your answer. 


Those who are trying to research or deliver services in the best interests of young 
people need to be encouraged to collect and make good use of data, with the 
necessary safeguards and procedures. 


Do you envisage any feasibility challenges to online services delivering this standard? 


© Yes 
© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Change in any commercial model dependent on data processing. Examples of good 
practice and alternative models may help. 


Q50 


Q50a 


Q51 


Q5la 


Q52 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


© Yes 
O No 


If yes, then please provide details (including links). 
https://www.igt.hscic.gov.uk/Caldicott2Principles.aspx 


Data sharing: Do not disclose children’s data unless you can demonstrate a 
compelling reason to do so, taking account of the best interests of the child. 


o) I would like to respond to this standard 


O Skip 


Have we communicated our expectations for this standard clearly? 
Q53  @ Yes 
O No 


If no, then please give reasons for your answer. 
Q53a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q54 @ Yes 
© No 
If yes, then please give reasons for your answer. 
Q54a_ As before, much that is submitted on Data Minimisation applies here too. 


Q55 


Q55a 


Q56 


Q56a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


© Yes 
O No 


If yes, then please give reasons for your answer. 
As before, much that is submitted on Data Minimisation applies here too. 


Do you envisage any feasibility challenges to online services delivering this standard? 


© Yes 
© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Good practice may help some ISS evolve new business models. 


Q57 


Q57a 


Q58 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


© Yes 
O No 


If yes, then please provide details (including links). 


Q58a_ Caldicott Principles 


Q59 


Geolocation: Switch geolocation options off by default (unless you can 
demonstrate a compelling reason for geolocation, taking account of the best 
interests of the child), and provide an obvious sign for children when location 
tracking is active. Options which make a child's location visible to others must 
default back to off at the end of each session. 


© I would like to respond to this standard 


O Skip 


Q60 


Q60a 


Q61 


Q6ia 


Have we communicated our expectations for this standard clearly? 
O Yes 
© No 


If no, then please give reasons for your answer. 


I would question whether geolocation poses more of a risk than benefit. I think its 
presence makes a certain sense, but also highlights how the current document does 
not afford an assessment of different levels of risk, and their impact over the short 
term and long term. I am uncertain whether geolocation is as great a concern as 
data minimisation and sharing though it often sounds alarming. For example, is it 
essential to bullying or exploitation? I would subsume this to data minimisation and 
not sharing with other apps. 


Do you have any examples that you think could be used to illustrate the 
approach we are advocating to this standard? 


O Yes 
© No 


If yes, then please give reasons for your answer. 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q62 ©) Yes 
© No 


If yes, then please give reasons for your answer. 


Q62a 
Do you envisage any feasibility challenges to online services delivering this 
standard? 

Q63 ©) Yes 


© No 
If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q63a 


Q64 


Q64a 


Q65 


Q65a 


Q66 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
© No 


If yes, then please provide details (including links). 


Parental controls: If you provide parental controls give the child age 
appropriate information about this. If your online service allows a parent or 
carer to monitor their child's online activity or track their location, provide an 
obvious sign to the child when they are being monitored. 


O I would like to respond to this standard 


© Skip 


Have we communicated our expectations for this standard clearly? 
Q67 Ọ Yes 
O No 


If no, then please give reasons for your answer. 
Q67a 


Do you have any examples that you think could be used to illustrate the 
approach we are advocating to this standard? 


Q68 ©) Yes 
O No 


If yes, then please give reasons for your answer. 
Q68a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q69 Ọ Yes 

O No 

If yes, then please give reasons for your answer. 
Q69a 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q70 Ọ Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q70a 


Q71 


Q7la 


Q72 


Q72a 


Do you think this standard requires a transition period of any longer than 3 
months after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
O No 


If yes, then please provide details (including links). 


Q73 


Q74 


Q74a 


Q75 


Q75a 


Profiling: Switch options which use profiling off by default (unless you can 
demonstrate a compelling reason for profiling, taking account of the best 
interests of the child). Only allow profiling if you have appropriate measures in 
place to protect the child from any harmful effects (in particular, being fed 
content that is detrimental to their health or wellbeing). 


© I would like to respond to this standard 


O Skip 


Have we communicated our expectations for this standard clearly? 


O Yes 
© No 


If no, then please give reasons for your answer. 


I am concerned that profiles will achieve the same status as as personal data, 
without any interrogation of how the profile was developed. I presume a credit score 
today might offer a similar model for how you are profiled and that affects your life 
chances. It goes beyond recommendations (still a risk when you are repeatedly 
shown self-harm content) to more complex and shadow profiling that will be shared. 
I think there is also a risk of blunting agency and facilitating choice and free will. 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


O Yes 
© No 


If yes, then please give reasons for your answer. 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q76 ©) Yes 

© No 

If yes, then please give reasons for your answer. 
Q76a 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q77 © Yes 
© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q77a 


Q78 


Q78a 


Q79 


Q79a 


Q80 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
© No 


If yes, then please provide details (including links). 


Nudge techniques: Do not use nudge techniques to lead or encourage 
children to provide unnecessary personal data, weaken or turn off privacy 
protections, or extend use. 


© I would like to respond to this standard 


O Skip 


Q81 


Q8ia 


Q82 


Q82a 


Have we communicated our expectations for this standard clearly? 
© Yes 
O No 


If no, then please give reasons for your answer. 


Do you have any examples that you think could be used to illustrate the 
approach we are advocating to this standard? 


© Yes 
© No 
If yes, then please give reasons for your answer. 


Behavioural scientists have been working for years on the 'nudges' that promote health and 


well-being. It is good, as listed, to hold on to the opportunity to promote development and 
better decisions. 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q83 ©) Yes 


© No 


If yes, then please give reasons for your answer. 


Q83a 
Do you envisage any feasibility challenges to online services delivering this 
standard? 

Q84 QC) Yes 


© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q84a 


Q85 


Q85a 


Q86 


Q86a 


Q87 


Do you think this standard requires a transition period of any longer than 3 
months after the code comes into force? 


O Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to 
from this section of the code? 


O Yes 
© No 


If yes, then please provide details (including links). 


Connected toys and devices: If you provide a connected toy or device ensure 
you include effective tools to enable compliance with this code 


O I would like to respond to this standard 


© skip 


Have we communicated our expectations for this standard clearly? 
Q88 ©) Yes 


O No 


If no, then please give reasons for your answer. 
Q88a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q89 ©) Yes 
O No 


If yes, then please give reasons for your answer. 
Q89a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q90 ©) Yes 
O No 


If yes, then please give reasons for your answer. 


Q90a 
Do you envisage any feasibility challenges to online services delivering this 
standard? 

Q91 ©) Yes 


O No 
If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q9la 


Q92 


Q92a 


Q93 


Q93a 


Q94 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


O Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


O Yes 
O No 


If yes, then please provide details (including links). 


Data protection impact assessments: Undertake a DPIA specifically to 
assess and mitigate risks to children who are likely to access your service, 
taking into account differing ages, capacities and development needs. Ensure 
that your DPIA builds in compliance with this code. 


O I would like to respond to this standard 


© Skip 


Have we communicated our expectations for this standard clearly? 
Q95 ©) Yes 
O No 


If no, then please give reasons for your answer. 
Q95a 


Do you have any examples that you think could be used to illustrate the 
approach we are advocating to this standard? 


Q96 ©) Yes 
O No 


If yes, then please give reasons for your answer. 
Q96a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q97 Ọ Yes 

O No 

If yes, then please give reasons for your answer. 
Q97a 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q98 ©) Yes 
O No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q98a 


Do you think this standard requires a transition period of any longer than 3 months 
after the code comes into force? 


Q99 ©) Yes 
O No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Q99a 


Do you know of any online resources that you think could be usefully linked to from 
this section of the code? 


Q100 ©) Yes 
© No 


If yes, then please provide details (including links). 


Q100 
a 


Governance and accountability: Ensure you have policies and procedures in 
place which demonstrate how you comply with data protection obligations, 
including data protection training for all staff involved in the design and 
development of online services likely to be accessed by children. Ensure that 
your policies, procedures and terms of service demonstrate compliance with 
the provisions of this code 


O I would like to respond to this standard 


© Skip 


Q101 


Have we communicated our expectations for this standard clearly? 
Q102 ©) Yes 

© No 

If no, then please give reasons for your answer. 
Q102 
a 


Do you have any examples that you think could be used to illustrate the approach we 
are advocating to this standard? 


Q103 ©) Yes 

O No 

If yes, then please give reasons for your answer. 
Q103 
a 


Do you think this standard gives rise to any unwarranted or unintended 
consequences? 


Q104 ©) Yes 
O No 
If yes, then please give reasons for your answer. 


Q104 
a 


Do you envisage any feasibility challenges to online services delivering this standard? 
Q105 ©) Yes 
© No 


If yes, then please provide details of what you think the challenges are and how you 
think they could be overcome? 


Q105 
a 


Do you think this standard requires a transition period of any longer than 3 
months after the code comes into force? 


Q106 ©) Yes 
© No 


If yes, then please provide your reasons for this view, and give an indication of what 
you think a reasonable transition period would be and why. 


Q106 
a 


Do you know of any online resources that you think could be usefully linked to 
from this section of the code? 

Q107 ©) Yes 
O No 


If yes, then please provide details (including links). 
Q107 
a 


Section 3: Your views on the code sections 


Is the 'Enforcement of this code’ section of the code clearly communicated? 
Q108 © Yes 

O No 

If no, then please provide your reasons for this view. 


Q108 
a 


Is the 'Glossary' section of the code clearly communicated? 
Q109 Q Yes 

O No 

If no, then please provide your reasons for this view. 


Q109 
a 


Are there any key terms missing from the 'Glossary'? 
Q110 ©) Yes 

© No 

If yes, then please provide your reasons for this view. 


Q110 
a 


Is the ‘Annex A: Age and developmental stages' section of the code clearly 
communicated? 


Q111 @ Yes 
O No 
If no, then please provide your reasons for this view. 


Q111 
a 


Is there any information that you think needs to be changed in the Annex A: 
Age and developmental stages' section of the code? 


Q112 © Yes 
© No 
If yes, then please provide your reasons for this view. 


Q112 
a 


Do you know of any online resources that could be usefully linked to the 
'Annex A: Age and developmental stages' section of the code? 


Q113 © Yes 
© No 


If yes, then please provide details (including links). 
Q113 
a 


Is the ‘Annex B: Lawful basis for processing’ section of the code clearly 
communicated? 


Q114 @ Yes 
© No 
If no, then please provide your reasons for this view. 


Q114 
a 


Is the 'Annex C: Data Protection Impact Assessment' section of the code 
clearly communicated? 


Q115 © Yes 
O No 


If no, then please provide your reasons for this view. 
Q115 
a 


Q116 


Do you think any issues raised by the code would benefit from further (post 
publication) work, research or innovation? 


© Yes 
O No 


If yes, then please provide your reasons for this view. 


We are at the beginning of learning how technology can ensure or even promote 
development and the age and developmental aspects need to be developed as the 
evidence grows. This will offer a balanced perspective and not just an emphasis on 
harms and protections. The latter are vital, but many developers start out wanting to 
do good, and we must help them. Perhaps a more dynamic perspective on promoting 
well-being and development may assist? 


Section 4: About you 


Are you answering as: 

Q117 ©) A body representing the views or interests of children 
O A body representing the views or interests of parents 
© A child development expert 
© An academic 
O An individual acting in another professional capacity 
O A provider of an ISS likely to be accessed by children 
O A trade association representing ISS providers 


O An individual acting in a private capacity (e.g. someone providing their views as a 
member of the public of the public or a parent)? 


© An ICO employee 
O Other 
Please specify: 

Q117 

a 


Please specify: 
Q117 
b 


Please state your name or if you're answering on behalf of an organisation, 
your organisation's name. 


Q118 Dr Richard Graham, Consultant Child & Adolescent Psychiatrist,Clinical Lead, Good Thinking: London’s 
Digital Mental Well-being Service 


Thank you for responding to this consultation 
We value your input. 


